| 1 | # Anomaly Analysis |
| 2 | |
| 3 | Get a forensics‑grade explanation of unusual behavior. The Anomaly Analysis report correlates ML‑detected anomalies across nodes and metrics, reconstructs the timeline, and proposes likely root causes with supporting evidence. |
| 4 | |
| 5 |  |
| 6 | |
| 7 | ## When to use it |
| 8 | |
| 9 | - Post‑incident analysis and RCA preparation |
| 10 | - Investigating “what changed here?” on a chart or service |
| 11 | - Validating whether anomalies were symptoms or causes |
| 12 | |
| 13 | ## How to generate |
| 14 | |
| 15 | 1. In Netdata Cloud, open `Insights` |
| 16 | 2. Select `Anomaly Analysis` |
| 17 | 3. Choose the time window around the event of interest |
| 18 | 4. Scope to affected services/nodes if known |
| 19 | 5. Click `Generate` |
| 20 | |
| 21 | ## What’s analyzed |
| 22 | |
| 23 | - Agent‑side ML anomaly scores (every metric, every second) |
| 24 | - Temporal propagation of anomalies across metrics/services |
| 25 | - Correlations with alerts, deployments, and configuration changes |
| 26 | - Cross‑node relationships and influence chains |
| 27 | |
| 28 | ## What you get |
| 29 | |
| 30 | - Narrative of how the incident unfolded |
| 31 | - Ranked list of likely root causes vs. downstream effects |
| 32 | - Key correlated signals and “why this matters” notes |
| 33 | - Recommendations to prevent recurrence |
| 34 | |
| 35 |  |
| 36 | |
| 37 | ## Example: “What changed here?” |
| 38 | |
| 39 | Point the report at a suspicious time window and let it reconstruct the change: which metrics shifted first, where anomalies clustered, and which changes correlate strongly with the observed behavior. |
| 40 | |
| 41 | ## Related tools |
| 42 | |
| 43 | - Use the `Anomaly Advisor` tab for interactive exploration |
| 44 | - Combine with `Metric Correlations` to focus the search space |
| 45 | |
| 46 | ## Availability and usage |
| 47 | |
| 48 | - Available on Business and Free Trial plans |
| 49 | - Each report consumes 1 AI credit (10 free per month on eligible plans) |
| 50 |